This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier: In9hGkFQN009pXzqtWHDrG9kWjW3m/zqBZMzKGbxVbY=
Subject key identifier: BF:40:B4:83:B0:39:FC:2D:3C:F3:BE:5A:7B:77:E1:D1:A7:0E:1E:4C
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number: AA
Signing time: Sun 25 Jan 2026 05:22:35 +0000
Manifest this update: Sun 25 Jan 2026 05:22:35 +0000
Manifest next update: Sun 01 Feb 2026 05:22:35 +0000
Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: dXda/q3RdIfA6edKMmalXdr/gTv4IPfkOiKWKIpEmbc=)
2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Validity
Not Before: Jan 25 05:22:35 2026 GMT
Not After : Feb 1 05:22:35 2026 GMT
Subject: CN=6975a89b-0938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:75:34:d1:18:0b:6c:99:18:4d:49:5b:8f:
f5:d7:7d:93:a7:e4:72:78:41:73:ba:7a:9c:bb:cd:
77:ba:fe:e6:06:52:ff:05:b9:d6:23:bf:1f:3c:c2:
da:3e:d7:56:2b:99:b3:08:1e:d7:c2:fc:8b:c9:44:
8d:15:ed:08:f9:79:b8:bd:70:47:a7:31:38:ed:85:
88:60:7e:f9:b1:e2:33:7b:21:a8:a9:b7:fe:f5:36:
15:8b:3b:d1:22:19:d7:92:77:97:e9:59:ec:a2:27:
ac:d3:63:ba:86:39:09:7d:b7:a8:d1:53:53:1c:f4:
b6:a4:af:d9:5b:1a:6e:fb:bf:68:e3:81:94:23:09:
ed:7c:4c:18:ba:e9:96:27:f7:82:ca:1b:46:cc:fc:
11:2b:d6:d3:f6:72:71:91:c5:c6:5b:1c:17:b1:d3:
2e:31:3f:61:c0:45:6b:39:d7:ce:ca:16:a8:87:ac:
e6:c0:1d:8c:74:96:21:e7:fb:ce:5b:5a:cc:ea:22:
f1:85:57:84:09:59:10:87:7d:02:ae:82:aa:21:cf:
83:18:71:ee:1e:db:48:80:b4:3b:b7:03:3a:f7:cf:
90:af:44:d7:4e:12:d6:66:07:26:30:ea:6c:e1:cc:
3b:1e:de:17:b1:16:6d:30:81:f4:bd:bd:87:ae:20:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:40:B4:83:B0:39:FC:2D:3C:F3:BE:5A:7B:77:E1:D1:A7:0E:1E:4C
X509v3 Authority Key Identifier:
keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:1e:b5:da:31:68:19:c1:29:f8:f6:0f:39:12:c7:b2:50:
01:47:aa:f6:51:f9:c8:c1:94:8f:a6:b0:fb:09:d9:6a:59:2e:
6b:2b:b5:31:7a:95:bc:6f:2a:25:7d:49:21:93:fd:eb:0b:a4:
48:d6:be:85:22:25:24:1a:6c:f5:fa:5c:a6:83:5d:5a:0f:1d:
77:d9:53:4a:a3:67:3e:f4:f0:ec:1e:e6:7a:a8:4a:c0:01:b9:
9a:6c:c7:2f:7c:b8:22:00:b0:54:22:00:a2:e5:10:5d:c8:1b:
50:80:3b:49:72:43:d8:e2:f7:bd:36:94:69:83:df:6a:c0:34:
61:16:50:b3:e7:f2:53:ee:f9:19:71:7e:f0:e7:88:b6:1c:73:
1c:90:83:58:68:e1:37:e5:3f:e4:15:15:52:0e:0e:72:3a:d4:
dd:c0:cf:9e:75:fb:af:e4:07:35:42:b4:b1:f1:d2:5b:f6:69:
2a:dc:4c:e8:39:f1:e2:b8:39:68:74:b0:a1:a1:b1:7c:57:bf:
b1:5a:d7:2f:c5:29:30:3e:16:c6:6a:d3:25:4b:a1:b9:0e:6b:
27:50:13:41:3b:33:a4:58:86:b7:ff:98:d2:8a:46:25:4a:8e:
c1:da:89:bf:0e:9c:2f:14:00:b7:41:9f:a8:fc:e8:02:98:5f:
89:7a:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:45:25 2026 by rpki-client